[NEUTRAL] Update dotnet monorepo#20

Open

mend-for-git.832008.xyz[bot] wants to merge 1 commit intocontribfrom

whitesource-remediate/dotnet-monorepo

mend-for-git.832008.xyz bot commented Mar 13, 2025 •

edited

Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.AspNetCore.Mvc.Testing (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.CodeAnalysis.CSharp	`4.10.0` → `4.14.0`					nuget	minor
Microsoft.Data.Sqlite (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.EntityFrameworkCore.Design (source)	`8.0.10` → `8.0.24`					nuget	patch
Microsoft.EntityFrameworkCore.SqlServer (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.EntityFrameworkCore.Sqlite (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Caching.Abstractions (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Caching.Hybrid (source)	`9.0.0-preview.9.24556.5` → `9.10.0`					nuget	minor
Microsoft.Extensions.Caching.Memory (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Configuration.Abstractions (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Configuration.Json (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.DependencyInjection (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.FileProviders.Embedded (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.FileProviders.Physical (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Hosting.Abstractions (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Http (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Identity.Core (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Identity.Stores (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Logging (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Logging.Debug (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Options (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Options.ConfigurationExtensions (source)	`9.0.0` → `9.0.13`					nuget	patch
Microsoft.Extensions.Options.DataAnnotations (source)	`9.0.0` → `9.0.13`					nuget	patch
System.Data.Odbc (source)	`9.0.0` → `9.0.13`					nuget	patch
System.Data.OleDb (source)	`9.0.0` → `9.0.13`					nuget	patch
System.Runtime.Caching (source)	`9.0.0` → `9.0.13`					nuget	patch
System.Security.Cryptography.Xml (source)	`9.0.0` → `9.0.13`					nuget	patch
System.Text.Encodings.Web (source)	`9.0.0` → `9.0.13`					nuget	patch
dotnet-sdk	`9.0.100` → `9.0.311`					dotnet-sdk	patch

Release Notes

dotnet/dotnet (Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation)

`v9.0.7`: .NET 9.0.7

You can build .NET 9.0 from the repository by cloning the release tag v9.0.7 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.6`: .NET 9.0.6

You can build .NET 9.0 from the repository by cloning the release tag v9.0.6 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.5`: .NET 9.0.5

You can build .NET 9.0 from the repository by cloning the release tag v9.0.5 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.4`: .NET 9.0.4

You can build .NET 9.0 from the repository by cloning the release tag v9.0.4 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.3`: .NET 9.0.3

You can build .NET 9.0 from the repository by cloning the release tag v9.0.3 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.2`: .NET 9.0.2

You can build .NET 9.0 from the repository by cloning the release tag v9.0.2 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

`v9.0.1`: .NET 9.0.1

You can build .NET 9.0 from the repository by cloning the release tag v9.0.1 and following the build instructions in the main README.md.

Alternatively, you can build from the sources attached to this release directly.
More information on this process can be found in the dotnet/dotnet repository.

Attached are PGP signatures for the GitHub generated tarball and zipball. You can find the public key at https://dot.net/release-key-2023

dotnet/extensions (Microsoft.Extensions.Caching.Hybrid)

`v9.10.0`

What's Changed

Branding updates for 9.10 by @Copilot in #6769
Doc improvements by @gewarren in #6794
Bump vite from 6.3.5 to 6.3.6 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript by @dependabot[bot] in #6793
Updated changelogs for AI libs by @stephentoub in #6787
Update MCP server template by @jeffkl in #6772
Add support for using ConversationID for AzureOpenAI and OpenAI by @ViveliDuCh in #6770
Merging internal commits by @joperezr in #6801
Merge changes from release/9.9 branch by @joperezr in #6803
Support keyed HybridCache with keyed DistributedCaches and named options by @kelly-yinn in #6694
Inventory as code by @wtgodbe in #6820
Increase output token limit for EquivalenceEvaluator by @shyamnamboodiripad in #6835
Fix KeyNotFoundException on HttpRequestLatencyListener.OnEventWritten for uknown event sources by @ssmelov in #6821
Add project name normalization to match aspire's code generator logic by @ViveliDuCh in #6818
Disable really noisy analyzers, part 1 by @stephentoub in #6837
Fix KeyNotFoundException in HttpRequestLatencyListener.OnEventWritten by @pentp in #6823
Update global.json to use .NET 9.0.0 stable instead of RC 1 by @Copilot in #6846
Add measures and tags with mediator object to the HttpClientLatencyLogEnricher by @rainsxng in #6783
Add comprehensive .github/copilot-instructions.md for dotnet/extensions repository by @Copilot in #6792
Update to .NET 10 SDK by @eerhardt in #6863
Update Microsoft.Extensions.AI changelog files with current NuGet versions by @Copilot in #6849
Fix GenerateImagesAsync_SingleImageGeneration integration test by @stephentoub in #6843
Re-enable IDE0032 by @stephentoub in #6866
Add OpenTelemetrySpeechToTextClient and friends by @stephentoub in #6845
Update ModelContextProtocol version in MCP template by @MackinnonBuck in #6870
Scope Ollama resilience settings to Web/Program.cs and restore ServiceDefaults by @ViveliDuCh in #6850
Update Aspire by @Varorbc in #6858
Update MCP template for new registry specification by @Copilot in #6796
Add support for HostApplicationBuilder in AmbientMetadata extension by @eduherminio in #6867
Fix mcpserver test baselines by @jeffhandley in #6874
Move Microsoft.Extensions.ServiceDiscovery to dotnet/extensions by @eerhardt in #6868
Add copy constructors to option types (ChatOptions, etc.) by @stephentoub in #6882
Fix ChatMessage.CreatedAt being always overwritten by the latest timestamp. by @Copilot in #6885
Small doc fixes by @gewarren in #6887
Update AI changelogs with some recent additions by @stephentoub in #6886
Fix Assistants IChatClient handling of unrelated tool calls in history by @stephentoub in #6891
Fix duplication between OpenAI Assistants pre-configured tools by @stephentoub in #6896
Update MCP Server Template to adhere to 2025-09-29 server.json schema by @joelverhagen in #6888
Remove Azure.AI.OpenAI dependency from templates and tests by @Copilot in #6873
Remove UnsafeRelaxedJsonEscaping by @peterwald in #6899
Fix bug to yield remaining buffered FCC by @westey-m in #6903
Fix serialization of [Experimental] AIContent-derived types by @stephentoub in #6900

New Contributors

@westey-m made their first contribution in #6745
@jeffkl made their first contribution in #6772
@ViveliDuCh made their first contribution in #6770
@kelly-yinn made their first contribution in #6694
@ssmelov made their first contribution in #6821
@Varorbc made their first contribution in #6858

Full Changelog: dotnet/extensions@v9.9.0...v9.10.0

`v9.9.0`

Highlights

AI

Abstractions for remote MCP servers; response/approval flow support via new experimental types
Function approvals via new experimental types (e.g., ApprovalRequiredAIFunction, user input/approval request & response content).
Reasoning text streaming for OpenAI Responses ChatClient streaming.
AIFunction split into a base class to improve extensibility.
IChatReducer moved to Microsoft.Extensions.AI.Abstractions.
Updated to OpenAI 2.4.0 and genai standard convention 1.37.
Coalescing logic now treats ChatMessage.Role changes as new messages.
GetResponseAsync<T> now reads only the last message (bug fix).
OpenTelemetry ChatClient/EmbeddingGenerator logs raw additional properties (no key mangling).
Fixed empty annotated text chunk handling in streaming with OpenAI Assistants.

Telemetry & Diagnostics

HTTP diagnostics log query string params with proper redaction (emitted on url.query).
server.address telemetry emits host only (per OpenTelemetry semantic conventions).
Heuristics added to detect well-known model hosts.
Resource monitoring can consider Environment.CpuUsage.

New Contributors

@ykumashev made their first contribution in #6696

Full Changelog: dotnet/extensions@v9.8.0...v9.9.0

`v9.8.0`

What's Changed

Align EventId generation with M.E.Logging source-gen by @xakep139 in #6566
Add resiliency mechanism to CPU and memory utilization checks by @amadeuszl in #6528
Suppress flaky test until fixed by @joelverhagen in #6568
Create a project template for an MCP server by @joelverhagen in #6547
Use dnx instead of dotnet tool exec in MCP server template README by @joelverhagen in #6571
Add reporting tests that show NLP results. by @peterwald in #6574
Branding updates for 9.8.0 by @joperezr in #6573
Fix ConfigureEvaluationTests.ps1 script when $ConfigRoot is not supplied by @peterwald in #6575
Refactor Resource Monitoring by @evgenyfedorov2 in #6554
Update McpServer template for 0.3.0-preview.2 by @stephentoub in #6578
Add container.cpu.time metric by @evgenyfedorov2 in #5806
Add netstandard2.0 compatibility to Microsoft.Extensions.Diagnostics.Testing and dependencies by @bdovaz in #6219
Add netstandard2.0 compatibility to Microsoft.Extensions.Telemetry and dependencies by @bdovaz in #6218
Simplify Http.Diagnostics by @pentp in #6174
Add netstandard2.0 compatibility to Microsoft.Extensions.Http.Resilience and dependencies by @bdovaz in #6582
Ingore null loggers returned by LogProviders in ELoggerFactory by @petrroll in #6585
Merging changes from internal by @joperezr in #6588
[Logging] Fixes LogProperties and LogPropertyIgnore attributes to work if an object being logged resides in a different assembly than the logging method by @iliar-turdushev in #6600
Add memory usage metric by @evgenyfedorov2 in #6586
Add schema version to server.json in MCP template by @joelverhagen in #6606
Merge release/9.7 into main by @joperezr in #6589
Update MCP server template readme to show both VS Code and Visual Studio notes by @Copilot in #6591
Update Azure Open AI package referenced by eval integration tests by @shyamnamboodiripad in #6609
Target .NET 8 for more stable runtime requirement by @joelverhagen in #6617
Add support for new Azure AI Foundry project type for Safety evals by @shyamnamboodiripad in #6621
M.E.AI.AzureAIInference - Azure.AI.Inference Package Bump by @rogerbarreto in #6624
Add DataContent.Name property by @stephentoub in #6616
Fix handling of multiple responses messages by @stephentoub in #6627
Expose additional chat model conversion helpers by @stephentoub in #6629
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #6633
[Http.Resilience] The DisableFor method should try to retrieve the request object from the resilience context by @iliar-turdushev in #6618
Bump Package validation baseline version to 9.7.0 by @Copilot in #6650
Fix internal package version detection for project templates by @MackinnonBuck in #6651
Remove Microsoft.Extensions.AI.Ollama by @MackinnonBuck in #6655
Fix M.E.AI package refs by @stephentoub in #6654
Add [Description] to DataContent.Uri by @stephentoub in #6615
Fix duplicate solution file when creating an AI Chat Web app from VS by @MackinnonBuck in #6653
Add ChatMessage.CreatedAt by @stephentoub in #6657
Add TextContent.Annotations by @stephentoub in #6619
Add FunctionInvokingChatClient.AdditionalTools by @stephentoub in #6661
Fix unintentional test env var change by @stephentoub in #6660
Add more openai conversion helpers by @stephentoub in #6662
Add OriginalRepoCommitHash to assemblies by @BrennanConroy in #6667
Include a trivial items keyword if missing. by @eiriktsarpalis in #6669
Add resolution of function parameter level data annotation attributes. by @eiriktsarpalis in #6671
Fix issue with NetSourceIndexStage1 for dependency conflict versions by @joperezr in #6672
Expose streaming conversion utility methods by @stephentoub in #6636
Couple of fixes for MEAI.Evaluation by @shyamnamboodiripad in #6673
Fix one more version conflict on the docs transport package by @joperezr in #6675
Introduce metadata to identify built-in evaluation metrics by @shyamnamboodiripad in #6674
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #6679
Emit {OriginalFormat} in HttpClient logger by @iliar-turdushev in #6682
Update to OpenAI 2.3.0 by @stephentoub in #6684
Remove AdjustTime from experimental by @amadeuszl in #6668
Allow custom filtering logic for FakeLogger by @Demo30 in #5848
Mark packages as stable and update to .NET Servicing versions by @joperezr in #6700
[release/9.8] Backport several AI-related PRs by @stephentoub in #6703
[release/9.8] Update Azure.AI.OpenAI by @github-actions[bot] in #6710
[release/9.8] Add support for text-to-image by @ericstj in #6711
[release/9.8] Use Azure hosting integrations in Aspire AI Chat Web template by @MackinnonBuck in #6712
[release/9.8] Add middleware for reducing chat history by @github-actions[bot] in #6713

New Contributors

@joelverhagen made their first contribution in #6568
@bdovaz made their first contribution in #6219
@petrroll made their first contribution in #6585

Full Changelog: dotnet/extensions@v9.7.0...v9.8.0

`v9.7.0`

What's Changed

Branding updates for 9.7 by @joperezr in #6495
Fix name of genai input/output tokens tag by @stephentoub in #6494
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #6503
Improve handling of RawRepresentation in OpenAI{Response}ChatClient by @stephentoub in #6500
Bring back AsIChatClient for OpenAI AssistantClient by @stephentoub in #6501
Add resiliency to Resource Monitoring in Linux by @amadeuszl in #6489
Merging changes from the internal fork by @joperezr in #6508
Workaround OpenAI assistant's RunCreationOption's tools override by @stephentoub in #6512
Add ChatOptions.Instructions by @stephentoub in #6505
Introduce evaluators for agentic workflows by @shyamnamboodiripad in #6514
Allow a CachingChatClient to control per-request caching by @stephentoub in #6524
Tweak OpenAI JSON schema transforms by @stephentoub in #6523
Merging changes from release/9.6 branch by @joperezr in #6516
Augment AIJsonUtilities.CreateJsonSchema for more types and annotations by @stephentoub in #6540
Added conversions from AIFunction to various OpenAI tools by @KrzysztofCwalina in #6539
Add SpeechToTextResponse.Usage by @stephentoub in #6546
Implement BLEU score evaluation for NLP tests by @peterwald in #6537
[main] Update dependencies from dotnet/arcade by @dotnet-maestro[bot] in #6553
#5962 Change to early return of OS instead of throwing by @juliankock in #5963
Mark log sampling & buffering API as stable by @evgenyfedorov2 in #6534
Update GenAI otel impl for v1.35 by @stephentoub in #6557
Implement GLEU and F1 NLP evaluators by @peterwald in #6555
Update tokenizer algorithm to use is [..] by @peterwald in #6561
Rename some constants to match convention by @shyamnamboodiripad in #6562
Add DistributedCachingChatClient/EmbeddingGenerator.AdditionalCacheKeyValues by @stephentoub in #6558

New Contributors

@KrzysztofCwalina made their first contribution in #6539
@juliankock made their first contribution in #5963

Full Changelog: dotnet/extensions@v9.6.0...v9.7.0

`v9.6.0`

What's Changed

Branding updates for 9.6.0 by @joperezr in #6399
Add log buffering info to README.md by @evgenyfedorov2 in #6403
Fix dynamic config update for log buffering by @evgenyfedorov2 in #6435
Remove unused select param from CreateRecordsForDocumentAsync by @jongalloway in #6341
Merge internal changes by @joperezr in #6437
Reduce per-lookup overhead from key validation in HybridCache by @MihaZupan in #6441
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in #6443
Merge release/9.5 into main by @joperezr in #6448
Fix up comments in eval API json files by @shyamnamboodiripad in #6452
Remove preview tag on Azure DevOps extension by @peterwald in #6456
Bump PackageValidation against 9.5.0 and enable for stable MEAI packages by @joperezr in #6458
Fix paramref tag by @gewarren in #6459
[main] Update dependencies from dotnet/arcade by @dotnet-maestro in #6462
Add a script to diff the contents of folders that match a specific pattern across two branches by @shyamnamboodiripad in #6453
Remove title and description keywords from root-level schemas in AIFunctionFactory. by @eiriktsarpalis in #6465
Replace JSON vector store with SQLite by @MackinnonBuck in #6438
Update chat template Microsoft.SemanticKernel dependency to 1.53.0 by @MackinnonBuck in #6470
Update chat template external

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from 55f6949 to 7b7ec82 Compare

March 20, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from 732f808 to caed76e Compare

April 11, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 3 times, most recently from 02741f0 to 895c52e Compare

May 16, 2025 05:15

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from 681da26 to 95edb26 Compare

June 12, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from 1d24946 to 95873c7 Compare

July 10, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from 95873c7 to c9c7d98 Compare

July 19, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from 803f357 to 3d9d354 Compare

August 7, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from 3d9d354 to 0b1cf6a Compare

August 13, 2025 02:01

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from bd891dd to fff1a46 Compare

September 11, 2025 02:02

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from fff1a46 to f0d1261 Compare

October 15, 2025 15:15

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from f0d1261 to 7e645fc Compare

November 12, 2025 04:13

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch 2 times, most recently from 66e5ad5 to d3ec7be Compare

November 26, 2025 14:25

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from d3ec7be to 9f9ba96 Compare

January 21, 2026 14:30


          [NEUTRAL] Update dotnet monorepo

b89e997

mend-for-git.832008.xyz bot force-pushed the whitesource-remediate/dotnet-monorepo branch from 9f9ba96 to b89e997 Compare

February 11, 2026 02:23

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet